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We present two experimental schemes to perform continuous variable (2,3) threshold quantum secret sharing 
on the quadratures amplitudes of bright light beams. Both schemes require a pair of entangled light beams. The 
first scheme utilizes two phase sensitive optical amplifiers, whilst the second uses an electro-optic feedforward 
loop for the reconstruction of the secret. We examine the efficacy of quantum secret sharing in terms of fidelity, 
as well as the signal transfer coefficients and the conditional variances of the reconstructed output state. We 
show that both schemes in the ideal case yield perfect secret reconstruction. 
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I. INTRODUCTION 

Quantum secret sharing (QSS) has attracted a lot of atten- 
tion recently as an important primitive for protecting quantum 
information. QSS, originally proposed as a means to protect 
classical information using laws of quantum physics has 
developed into a general theory describing a secure transmis- 
sion of quantum information to a group of parties (players), 
not all of whom can be trusted. The collaboration of the play- 
ers is essential in order to recover the quantum information. 
This general approach to QSS is the quantum analogue of 
classical secret sharing [g]. 

A QSS protocol involves a dealer who holds a secret state 
(quantum information) \tpxa}> encodes it into an entangled 
state 1^) over n quantum sub-systems (shares) and distributes 
the shares to n players. The encoding is done in such a way 
that only specified subsets of the players (the access structure) 
are able to extract the secret while all other subsets (forming 
the adversary structure) are unable to learn anything about it. 
The reconstruction of the secret by the collaborating players is 
then achieved by applying a suitable joint unitary operation on 
their shares, which disentangles one share from all the others 
and yields the secret state. 

Among QSS protocols, there is an important class of so- 
called (k, n) threshold schemes [|[, in which the access struc- 
ture consists of all groups of k or more players while there are 
n players in total. This makes the protocol "fair" in the sense 
that no player is favored among others. The simplest threshold 
scheme is the (2, 2) scheme where there are only two players 
and both have to collaborate to retrieve the secret. The im- 
plementation of this scheme is, in general, very simple. The 
dealer only needs to interfere the quantum secret on a beam 
splitter with a noisy beam, each player receiving one of the 
outputs. It is impossible to obtain any information about the 
secret state through operations on either share independently 
due to the contamination of the noisy beam. The secret can be 
perfectly reconstructed, however, if the players co-operate by 
interfering their shares on another 1 : 1 beam splitter. 

A continuous variable (2,3) QSS threshold schemes has 
been proposed by Tyc and Sanders [El. This scheme uses 



electromagnetic field modes, and employs interferometers for 
both the encoding and decoding of the secret. In this paper, we 
extend the original proposal by Tyc and Sanders and introduce 
another more practical scheme that utilizes an electro-optic 
feedforward technique. We consider the secret to be encoded 
on the sideband frequency quadrature amplitudes of a light 
beam. Ideally the dealer would employ a perfectly entangled 
pair of beams. This is in practice impossible, however, im- 
provement over classical schemes can still be achieved with 
finite amounts of entanglement. Moreover we will show that 
the introduction of classical noise by the dealer can further 
improve the QSS scheme. We compare and quantify the per- 
formances of both schemes in terms of available input entan- 
glement using two measures. We use the fidelity between in- 
put and output states as a figure of merit. We also characterize 
QSS in terms of the signal transfer coefficients and the con- 
ditional variances of both conjugate quadrature amplitudes of 
the secret. 

The paper is organized in the following manner. In Sec- 
tion [ll] we present the dealer protocol to generate three shares. 
We outline, in Section M, the central role of the optical para- 
metric processes in the QSS schemes. We then present the two 
secret sharing schemes in Section IV and characterize these 
schemes in Section [v|. 



II. (2,3) THRESHOLD SCHEME 




FIG. 1 : Dealer protocol for the production of three shares in a (2,3) 
threshold QSS scheme. 
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Figure [j] shows the dealer protocol of a (2,3) threshold QSS 
scheme as proposed by Tyc and Sanders The dealer em- 
ploys a pair of entangled beams to encode the secret by inter- 
fering one of them with the secret state on a 1:1 beam splitter. 
We let a^, oepri and oepr.2 denote the annihilation operators 
corresponding to the secret and the two entangled beams, re- 
spectively. The linearized expression for the annihilation op- 
erator is given by d(i) = a + 5a(t) where a and 6a(t) denote 
the steady state component and zero mean value fluctuations 
of the annihilation operator, respectively. The amplitude and 
phase quadrature operators are denoted as X + = a) + a and 
X~ = i (a* — d), whilst the variance of these operators is ex- 
pressed in the frequency domain as V ± (uo) — ([5X ± (lo)] 2 ). 
The annihilation operators corresponding to the three shares 
are then given by 



a i 
a 3 



a-tf, + oepri 

&tp — «EPR1 
OEPR2 



(1) 

(2) 
(3) 



Similar to the (2,2) secret sharing scheme discussed earlier, 
players 1 and 2 (henceforth denoted by {1,2}) only need to 
complete a Mach-Zehnder interferometer with the use of a 1:1 
beam splitter to retrieve the secret state. The output beams of 
the Mach-Zehnder are described by 



ai + a<i 
V2 



flEPRl 



(4) 



(5) 



Eq. (|4|) clearly shows that the the secret is perfectly recon- 
structed. In contrast, secret reconstructions for {2,3} or {1,3} 
require more complex protocols. The paper now focuses on 
experimental alternatives for the implementation of this re- 
construction process. 



HI. OPTICAL PARAMETRIC GAIN AND 
ENTANGLEMENT 

One of the important element for QSS is the optical para- 
metric down conversion process. In this process a pump pho- 
ton is converted into a pair of twin photons following the sim- 
ple scheme: huj pump — ► Huj s + huji, where the signal and idler 
modes are denoted lu s and u>i, respectively. 



A. Type II system 



^i,out 



, cosh r 



it 



a s in sinh r 



(7) 



where a s and a% are the annihilation operators of the signal 
and the idler modes, respectively. The interaction parameter 
is r = jt, where 7 is proportional to the pump field amplitude 
and the second order susceptibility coefficient of the crystal. 
By choosing a p and a q to be the ±45° polarized modes de- 
fined by a pq = (a s ± hi)/ \[2 and assuming that all the power 
is earned by mode a p , Eq. (||) and Eq. give 



= a, 



, cosh r 



a], in sinhr 



(8) 



from which we can deduce the total number of photons at the 
output (iVp.out) = G(4>)N with gain 



G(4>) — cosh 2r + sinh 2r cos < 



(9) 



where 



^pump — 20 p is the phase mismatch between the 
pump and the a p mode. The gain G(<p) oscillates between 
the two values Go = e 2r and e~ 2r , depending of the relative 
phase between the input and the pump beam. Finally we note 
that the output quadrature amplitudes are given by 



X 



p,out 



v— — v— 



B. Type I system 



(10) 
(11) 



Another way of performing the optical parametric down 
conversion process is by using a Type I crystal. Optical para- 
metric oscillators (OPO) operating below threshold can ex- 
hibit phase sensitive amplification [0. We assume the OPO 
is a simple Fabry-Perot cavity with a second order non-linear 
gain medium. The equations of motion for a general OPO 
cavity are given by 



d = 7a — na+ ^/2n} J A}y J r yj2hifAf + \/2hii8Ai (12) 
2K~ b A\ + y/2n}A\ + y/2Ki5Xi f ( 1 3) 



a 1 = 7 a'-Ka 1 



where A / and At, are the inputs into the front and back mirrors 
and SAi is a vacuum fluctuation term due to loss in the cavity. 
k = Kf + Kf, + m is the total cavity damping rate, where Kf, 
Kb and Ki are the damping rates of the front and back mirrors 
and the loss in the cavity respectively. 

The output from the OPA expressed in terms of an input A j 
can be derived from Eq. ( |T2[ ) and Eq. (|l3|). By setting Kb = 
and ki = 0, so that no vacuum fluctuation couple into the 
cavity, the output field quadratures from the OPA expressed in 
the frequency domain are 



This down conversion can be achieved in a bulk Type II sec- 
ond order non-linear crystal in a traveling wave configuration. 
By treating the pump as a classical beam, we find the input- 
output relations for the signal and idler annihilation operators 
to be [01 



&s,out 



, cosh r + a] in sinh r 



(6) 
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ILO + K - 
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(14) 
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where the general operator Z = Z(u>) is the Fourier transform 
of the time operator Z = Z(t). By assuming the frequency is 
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small such that u> <C Kf, the output field quadratures can be 
expressed more succinctly as 



X out — vGXf 
1 



x: 



G 



X 



J 



(16) 
(17) 



where the gain is defined as VG = (ft/ + 7)/(ft/ — 7). The 
amount of gain is dependent on the pump power, and on the 
relative phase between the pump and input beams. In the am- 
plification regime phase squeezed light is produced, whilst in 
the deamplification regime amplitude squeezed light is pro- 
duced. 



with a well chosen gain, {2,3} can get a measure of the am- 
plitude or the phase of the secret, but they can not measure 
both at the same time. This scheme can be used for practi- 
cal applications which require only classical information of a 
single quadrature to be transfered between the dealer and the 
players. Since the secret is not reconstructed, nor quantum in- 
formation of both quadratures transferred, this protocol does 
not qualify as QSS. 

Let us now concentrate on schemes which effectively re- 
construct both the amplitude and phase of the secret at the 
same time. 



A. The 2PSA scheme 



C. Production of entangled beams 

For Type II systems, the signal and idler output modes gen- 
erated by a single PSA, as defined in Eq. (^) and ([7]), exhibit 
quadrature entanglement [|J ^]. Since the two modes are or- 
thogonally polarized, the entangled beams can be spatially 
separated using a polarizing beam splitter. Whilst for Type 
I systems, quadrature entangled beams can be produced by 
interfering a pair of squeezed beams produced by two OPAs 
on a 1:1 beam splitter JlOj] . The output beams from the beam 
splitter also will exhibit quadrature entanglement. 

The entanglement between the X + and X~ quadratures of 
the output modes in both systems can be characterized by us- 
ing the inseparability criterion proposed by Duan et al. JTT|]. 
For symmetric inputs, Duan's inseparability criterion is given 
by 

((6X+ + 5X+) 2 ) + ((SX- - 5Xrf) < 2 (18) 

where subscripts s and i denote the two entangled beams. 
Since ((SX+ + 8X+) 2 ) = ((SX- - 5Xrf) = l/cosh2r 
for both configurations, the beams show quadrature entangle- 
ment when r > (Where r is the squeezing parameter of the 
input beams for Type I, or the interaction parameter for Type 
II). 



IV. PROPOSED EXPERIMENTAL SETUPS 

In this section, we analyze how {2,3} can reconstruct the 
secret sent by the dealer. The method described here can also 
be applied unchanged to {1,3}, and so we will not cite explic- 
itly this case in the following paragraphs. 

First, one can remark that by performing homodyne mea- 
surement on a 2 and a 3 , and then by combining their results 



This scheme follows the original idea of Tyc and Sanders 
[Q]. To reconstruct the secret using two PSAs, {2,3} first com- 
bine 0,2 and S3 on a 1 : 1 beam splitter, producing two beams 
a and b, as depicted in Fig. [| They pass each of these beams 
though separate PSAs, denoted by PSA a and PSAb respec- 
tively. Both the PSAs are adjusted so that the output of PSA a 
is amplified in the X + quadrature and deamplified in the X~ 
quadrature whilst the PSAb output is deamplified in the X + 
quadrature and amplified in the X~ quadrature. The gain of 
both PSAs is assumed to be equal. The final step required 
for reconstruction of the secret is to combine both PSA out- 
puts on another 1 : 1 beam splitter. We denote these outputs as 
tiouti srid a ou t 2 • 




FIG. 2: Reconstruction of secret for {2,3} using the 2PSA scheme. 

The PSAs can be used in both configurations discussed in 
Section H We find the output quadrature amplitudes for both 
configurations to be of the form 



X ± - 
^outi - 



2V2 



x? 



G- 



(3* 



VGJ V2 sqrt2 



(19) 



It is obvious that if output 1 is used to construct the secret, then 
output 2 will in the limit of perfect QSS contain no relevant 
information. We will therefore not analyse output 2. For the 
Type II configuration, the a* and (3 parameters are depen- 
dent on the interaction parameters of the parametric process 



P ± = 



VG [—= sinh r cosh 

W2 2 

VG ( — = cosh r sinh r 

W2 2 



— cosh r H — = sinh r 
G V 2 V2 

— sinh r -\ = cosh r 

G\2 V2 



XI 



(20) 
(21) 
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For the Type I configuration, they are dependent on the 
amount of squeezing of both squeezed state inputs. We there- 
fore obtain 



a 



^sqzl 



(-1T V2) + VG(-1± y/2) (22) 



f3 ± = -^-(-1±V2) + VG(-1tV2) (23) 
v G 




In the case of perfect entanglement (i.e. r 
the parametric gain to 



G = 



V2 + 1 
V2-1 



00), setting 



(24) 



will completely eliminate the contribution of the input entan- 
glement modes. We are therefore left with the original secret. 
With imperfect entanglement, we find for the Type II config- 
uration 



e^ r X ± 



(25) 



Similarly, the output quadrature amplitudes for the Type I con- 
figuration are given by 



x- 



= X- - V2X+ Z1 



(26) 
(27) 



where it is assumed that Xi Zl 2 are the squeezed quadratures. 
The results above demonstrate that with finite entanglement, 
{2,3} are able to reconstruct the secret a^ with added noise 
variance of 2e~ 2r . In addition to the parametric processes re- 
quired for the generation of a pair of entangled beams, the 
QSS scheme described above requires two additional PSAs. 
This is experimentally very challenging. Since non-linear 
effects in optics are small, there have been methods used 
to increase optical intensities in experiments to enhance the 
parametric process. One such example is the utilization of 
high peak power pulsed light sources, either in Q-switched 
or mode-locked setups, to single pass light beams through 
the non-linear mediums to achieve the required phase sensi- 
tive amplification. A common difficulty found in such sys- 
tems is the distortion of optical wave fronts due to the non- 
linear medium. This would result in poor optical interfer- 
ence and losses. Another method of increasing optical inten- 
sity in non-linear processes is the use of optical resonators. 
In this situation, the resonators also act as mode cleaners 
to the beams, thus ensuring better beam quality. However, 
impedance matching of the resonators, which is not required 
for single-pass phase sensitive amplification, is difficult to 
achieve. Imperfect impedance matching again leads to losses. 
It is therefore interesting to find an alternative scheme which 
does not require additional parametric processes for the recon- 
struction of the secret. In the next section, we will present a 
QSS scheme that requires only an electro-optic feedforward 
loop for {2,3} in secret reconstruction. 



FIG. 3: Dealer protocol and the reconstruction of secret for {2,3} 
using an electro-optic feedforward loop. 2:1 is a 2/3 reflective beam 
splitter and HR is a highly reflective beam splitter. PMi,2 are phase 
modulators on the respective amplitude squeezed beams. 



B. Feedforward loop scheme 

Electro-optic feedforward loops have been widely used 
in many continuous variable experiments. The feedforward 
setup has been demonstrated to be useful in noiseless control 
of light beams [Ojand has recently been used in teleporta- 
tion experiments [|l4|, Q ], In our feedforward QSS scheme, 
the dealer is required to add classical noise on the entangled 
beams. The purpose of adding classical noise will be dis- 
cussed in the characterization Section This can be achieved 
using a pair of phase modulators on the constituent amplitude 
squeezed beams as shown in Fig. || This results in the two en- 
tangled beams having anticorrelated classical noise in the am- 
plitude quadratures and correlated classical noise in the phase 
quadratures. Due to the 1:1 beam splitter ratio, both beams 
have an equal amount of added noise. The shares can then be 
expressed as 



«i 

«3 



a.4, + a EPR1 + 5a 

nil 

&V — Sepri — Sa m i 

in 2 



(28) 

(29) 
(30) 



where <5a m i,2 = (±<$.X"+ + i5X~ l )/2 are the additional clas- 
sical noise introduced by the two phase modulators. The 
strength of these additional modulations is given by V„ = 

{{5Xt?) = e 2s . 

Similar to the previous dealer protocol, {1,2} can retrieve 
the secret by completing a Mach-Zehnder interferometer. To 
reconstruct the secret, {2,3} can interfere beams 0,2 and S3 on 
a 2/3 reflective beam splitter as shown in Fig. || fll7|]. The 
beams splitter outputs are given by 



X-b — (^sqz 2 ' 



2x: 



x: 



x+ = 



-_(v+ -X 
[(X-^-X-^ )-3{X+ Zi +X+ Z2 )+2{X++X+)\ 



24 



(31) 
(32) 

(33) 



... [(X^ qz ~X+ lZi )-3(X sqzi +X sqZ2 )+2(X jl; -3X m )] 
X„ = ^= (34) 



24 



5 



Since X^ zl 2 <C 1 in the limit of large squeezing. We note 
that the 2/3 reflective beam splitter ensures that the phase 
quadrature of the secret is already faithfully reconstructed in 
Xr. By measuring the amplitude fluctuations and ap- 
plying them to X£, it is possible to eliminate the remaining 
anti-squeezed fluctuations, X~ qzl 2 , and the classical ampli- 
tude noise on the same beam. This can be done sim- 
ply by directly detecting beam c and then electro-optically 
feeding the detected signal to the amplitude of beam b with 
the right gain. Due to optical losses, however, better ef- 
ficiency can be achieved by divorcing the modulators from 
beam b as shown in Fig. [3} Instead the detected signal from 
beam c is encoded off line on a strong local oscillator beam, 
olo- The signal on the local oscillator can then be mixed 



back onto beam b using a highly reflective beam splitter as 
shown in Fig. T he resulting output quadratures are given 
by X^ ut = — eX^ + */eX^ . In the limit of high beam 
splitter reflectivity, e — * 0, we obtain 

X+ t ~ X+ + K(u>)81 

X out — X b (35) 

where K (to) is a gain transfer function which takes into ac- 
count the response of the electro-optic feedforward circuit and 
the loss due to the HR beam splitter. 51 is the detected pho- 
tocurrent of the amplitude quadrature fluctuations of beam c 
given by 



61 = 



In 



1 

71 



— -„ -*x~ i2 )-^= (sx+ zi +6X+J+V2 (sx+ + sx+) y^T^jsxj 



(36) 



where r\ and SX^ are, respectively, the detection efficiency and the vacuum fluctuations due to an imperfect detector. The output 
quadrature fluctuations can be re-expressed as 



1 



G 



(37) 
(38) 



where G = r)K(u)){X+) is the total gain of the feedforward 
loop. By setting G = 2\/2, it is clear that the anti-squeezing 
and classical noise terms of Eq. ( p7[ ) are cancelled. In the limit 
of perfect detection efficiency and large squeezing, we obtain 



8X+ k = V3SX+ 



sx- 



(39) 
(40) 



Hence {2,3} can reproduce a symplectically transformed ver- 
sion of the secret, a^, . We note that since symplectic transfor- 
mations are local unitary operation, no quantum information 
contained in the secret state is lost. Thus, the feedforward 
scheme works equally well when compared with the 2PSA 
scheme in terms of quantum information transfer. In order to 
reconstruct the quantum state of the secret, however, a single 
PSA is required on the output beam. Even so, the feedfor- 
ward scheme is still technically less demanding than the 2PSA 
scheme introduced in the earlier section. In the next section, 
we will introduce experimental measures to characterize both 
QSS schemes. 



V. CHARACTERIZATION 

In teleportation experiments fidelity, T — (V , in|/0 O ut|V'iu)> 
is conventionally used to quantify the efficacy of a teleporter 
[jj^t]. Fidelity can also be adopted to characterize QSS as it is 
a protocol that reconstructs input quantum states at a distance. 
If we assume that all input noise sources are Gaussian and that 
the secret is a coherent state, the fidelity of a QSS scheme is 
given by [pi] 



T = 2e 



-(fc++fc~) 



+ K,ut) 



(41) 



where k 



± 



<A^} 2 (1- 



)) 2 /(4V±+4^ lt ).As- 



suming an ideal detector (77 = 1), we obtain from the analysis 
of Section IV the theoretical limits of fidelity for the 2PSA 
scheme as a function of squeezing 



T. 



{1,3} 



•^{1,2} 



= 1 



-2r 



(42) 
(43) 



where the subscripts i and j in Fujy denote the collaborat- 
ing players. We note that ^{1,2} is always unity since the re- 
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construction of secret only requires a simple Mach-Zehnder. 
In the limit of perfect entanglement, r — ► oo, the fidelity of 
Eq. ( pi3| ) also approaches unity. In the case of the feedforward 
QSS scheme, however, we obtain 



graph plots the product of the conditional variances of both 
conjugate observables V q — V+.V^ against the sum of the 
signal transfer coefficients T q = T + + T~ . Here the condi- 
tional variances are given by 



•^{1,2} - 1 



•^{1,3} — -^{2,3} 



-r 



(2 + e- 2r ) (2 + 3e~ 2r ) 



(44) 
(45) 



where T is dependent on the quadratures of the secret, (X^) 
and the squeezing of the input states r, and is given by 



r= 



2-V3 
12 



(2- 



(46) 



Equation ( |45[ ) does not tend to unity even in the limit of infi- 
nite input squeezing. In fact, it quickly degrades to zero for 
finite squeezing and large secret sideband modulations. The 
reason for this is due to the symplectically transformed secret 
output state a out . We point out, however, that no information 
is lost. Indeed {2,3} can locally transform the output to get 
back the original secret state via a single parametric process. 
The fidelity given in Eq. ( p3| ) after the parametric correction 
then becomes equal to that of Eq. (p3|). 

An alternative measure that is invariant to symplectic trans- 
formations is the T-V graph proposed by Ralph and Lam Jig], 
and used to characterize quantum teleportation JIB]]. This 



\{sxpx^ 



(47) 



and the signal transfer coefficients are defined as 



± _ SNR out 



(48) 



In contrast to fidelity which measures the quality of the state 
reconstruction, the T-V graph emphasizes the transfer of quan- 
tum information [ 15 1. In an ideal QSS scheme, collaborating 



players would obtain T q — 2 and V q = 0. 

Using these measures, the collaborating players using the 
2PSA scheme can obtain 



V a 



1 - 

2e 



- 2e- 2r 

~2r 



(49) 
(50) 



Whilst for the feedforward scheme the collaborating players, 
which we will now denote as (CP), can obtain 



CP 



V CP = 



1 



(1 



G \2 
V2> 



1 + 2e~ 2r 



G 
V2 



V2y 



G 
V2 



3G'(l-r7) 
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9G 2 e- 2r + e 2r (G ~ 2^) 2 + 2e 2s (G - 2^2) 2 + 12G 2 



(51) 



(52) 
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FIG. 4: T-V graphs for the feedforward scheme with (a) no squeezing, (b) 40% of squeezing, and (c) 99% of squeezing. The lines represent 
the information retrieved by {2,3} with varying feedforward gain, and the points represent the information retrieved by {1} or {2} alone. 
The dashed lines and stars correspond to the absence of added modulations, whilst the solid lines and circles correspond to 20dB above the 
quantum noise of added modulations. We have assumed perfect detector efficiency for the feedforward loop. The coordinates of the points 
which are not outside of the plotted region are displayed in the inset of each graph. 
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where e 2s is the power of the added classical noise. Before analysing these results, we first determine the amount of in- 
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formation the single players (SP), i.e. the adversary structures, 
can learn about the secret if they were to measure their shares 
directly. In this situation, T^ p and V q SP for the single players 
are found to be 



SP 



Tl 



V SP = 



1 + cosh 2r 
(cosh 2r + e 



,2s 



(53) 
(54) 



Figure ^| shows the results of the feedforward QSS scheme 
for three different amounts of input squeezing. The dotted 
lines represent the results obtained by {2,3} in the absence of 
added classical noise when feedforward gain is varied. The 
star points represent the maximum information retrievable by 
{1} or {2} alone in the corresponding situations. Results for 
the addition of classical noise, 20 dB above the quantum noise 
limit, are depicted by solid lines for the collaborating play- 
ers and by circles for the single players. In the limit of infi- 
nite input squeezing, the collaborating players can reconstruct 
the secret perfectly, with T 9 CP — > 2 and V q CP — > 0. This is 
achieved with an optimum, feedforward gain of G = 2y/2 
where the influence of both the anti-squeezing quadratures 
(and the added classical noise) are completely cancelled as 

Whilst single players in the same 



oo, due to the dominant effect of the anti- 



discussed in Section [V B 



limit obtain no information about the secret, with T q p 

ySP 



and 



squeezing quadratures (and the added classical noise). These 
results are shown in the plots of Fig. |](c). In the case of finite 
squeezing and no added classical noise, however, the optimum 
feedforward gain for the collaborating players is always less 
than 2v / 2 as shown in both Fig. Q(a) and (b). Further, sin- 
gle players forming the adversary structures can obtain some 
quantum information about the secret. When the amount of 
input squeezing less than 42%, single players obtain more 
quantum information than the access structures using the feed- 
forward protocol. In this situation, the collaborating play- 
ers should directly measure their shares containing the secret. 
The classical limit obtained when there is no input squeezing 



and no added classical noise is then T~ p = T 9 CP = 1 and 

ySP _ yCP 



1 /4, as shown by the star point of Fig. 0(a). 
In order to prevent the single players from obtaining in- 
formation about the secret, the dealer can introduce phase 
quadrature noise on both input amplitude squeezed beams. 
The phase noise translates to added noise in both the ampli- 
tude and phase quadratures of the entangled beams, SX^, For 
large modulations, say 20 dB above the quantum noise limit, 
the single players obtain virtually no information about the 
secret, thus making T^ p — * and — > oo even in the ab- 
sence of input squeezing. Collaborating players on the other 
hand, obtain a zero squeezing classical limit of T^ p -> 2/3 



and V q CP -> 4. 

Another consequence of the added classical noise for the 
collaborating players is that the optimum gain for maximum 
information transfer again approaches 2^/2. This results in the 
collaborating players obtaining less information about the se- 
cret with increasing classical noise. Nonetheless, the collabo- 
rating players can now obtain much more information than the 
single players for all levels of input squeezing. Any amount of 
input squeezing will now differentially increase the amount of 
information the access structure has over the adversary struc- 
ture. These results are illustrated by the solid lines and the 
circles of Fig. [I| 



VI. CONCLUSION 



(T„ V q ) 




clas,n 


clas,n 


quan,n 


quan,n 


Adversary 


1 


(1,1/4) 


(0,oo) 


(0,oo) 


(0,oo) 


Structure 


2 


(1,1/4) 


(0,oo) 


(0,oo) 


(0,oo) 




3 


(0,1) 


(0,oo) 


(0,oo) 


(0,oo) 


Access 


{1,2} 


(2,0) 


(2,0) 


(2,0) 


(2,0) 


Structure 


{13} 


(1,1/4) 


(2/3,4) 


(2,0) 


(2,0) 




{2,3} 


(1,1/4) 


(2/3,4) 


(2,0) 


(2,0) 



TABLE I: Summary of the performances of the feedforward QSS 
schemes with (quan) and without (clas) optical entanglement; and 
with (n) and without added noise (fi). Parameters listed are the best 
achievable (T q , V q ) values. 

In this paper, we presented two experimental (2,3) thresh- 
old QSS schemes. The first one requires a pair of optically 
entangled beams and two phase sensitive amplifiers for the re- 
construction of the secret state. Whilst the second utilizes a 
pair of optically entangled beams and an additional electro- 
optic feedforward loop. We have shown that although the 
latter does not exactly reproduce the original secret state, all 
quantum information is retained in the reconstructed output 
state in the limit of perfect entanglement. We show that by 
introducing controlled classical modulations on the entangled 
beams, it is possible to insure security against attacks from in- 
dividual players. Table Q summarizes the performances of our 
proposed feedforward QSS scheme for both classical (with- 
out entanglement), and quantum (with perfect entanglement) 
regimes. They are also calculated for situations with and with- 
out added classical noise. 
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